       (e/grant-guest (s/context) (e/coll-catalog-item-id "PROV2" (e/coll-id ["coll4"])))
 
       ;; Try before reindexing
-      (is (d/refs-match? [coll1 coll2-2] (search/find-refs :collection {})))
+      (d/assert-refs-match [coll1 coll2-2] (search/find-refs :collection {}))
 
       ;; Reindex all collections
-      ;; manually check the logs here. It should say it's reindexing provider 1 and provider 3 as well.
+      ;; Manually check the logs. It should say it's reindexing provider 1 and provider 3 as well.
       (ingest/reindex-all-collections)
       (index/wait-until-indexed)
 
       ;; Search after reindexing
-      (is (d/refs-match? [coll1 coll2-2 coll4] (search/find-refs :collection {}))))
+      (d/assert-refs-match [coll1 coll2-2 coll4] (search/find-refs :collection {})))
 
     ;; Tests reindexing using the force current version option
     (testing "Force version reindex all collections"

                         (str "collections.atom?token=" guest-token
                              "&page_size=100&concept_id="
                              (str/join "&concept_id=" concept-ids)))]
          (is (= coll-atom (:results (search/find-concepts-atom :collection {:token guest-token
                                                                             :page-size 100
                                                                             :concept-id concept-ids})))))))
    (testing "JSON ACL enforcement"
      (testing "all items"
        (let [coll-json (da/collections->expected-atom

    (index/wait-until-indexed)

    ;;;;system token sees everything
    (d/assert-refs-match [c1-echo c1-dif c1-dif10 c1-iso c1-smap]
                         (search/find-refs :collection {:token (tc/echo-system-token)}))
    ;;guest user sees nothing
    (d/assert-refs-match [] (search/find-refs :collection {:token guest-token}))))

(deftest collection-search-with-restriction-flag-acls-test
  (let [guest-token (e/login-guest (s/context))
